Yeah, I say run GrapheneOS for the best security on android on a pixel. The next best if you want an older device is to run DeGoogled LineageOS, I use a Pixel 4a 5G and it runs superb and it’s easier to repair. It also doesn’t have the extra BS most phones have now these days. Although I do use a few more apps, defaults should suffice. (Except for messaging use Molly a android fork of Signal or XMPP)